Re: [whatwg/dom] Declarative Shadow DOM (#831)

> I know I am standing on a very small island here but on this island, I feel, `<template shadowroot="closed">` is a terrible idea and I fail to see its usefulness versus the risks it brings.

Would you agree that (if we only look at the risk of introducing sanitizer bugs), `<template shadowroot="open">` is also problematic, as there might be sanitizers (or even old DOMPurify versions) not _using_ it to inspect the input? I believe the authors want to solve for this, more generic case. I honestly think the closedness is the red herring here.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/dom/issues/831#issuecomment-717803593